Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File: 8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier: FF2jomOoaZZRErSQ4/ZUMEvspRyXrr6XubYo+fIRbmM=
Subject key identifier: D9:B3:A5:3E:65:A0:22:DB:59:F1:3B:4B:A8:9C:11:13:F6:04:C3:5E
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer: /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial: 01A1C6D64F67C608F6C67BA0DFA38F43A4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number: 1AEE
Signing time: Tue 10 Nov 2026 19:01:36 +0000
Manifest this update: Tue 10 Nov 2026 19:01:36 +0000
Manifest next update: Wed 11 Nov 2026 19:01:36 +0000
Files and hashes: 1: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: ag2ChRBulBUsqAwZA5PTzAmp/v5wcEkee70lPo0MxCY=)
2: M2iBBMOA3qsSMyjlSglJFjGkADw.roa (hash: cG0ba+40x+sUUIApNoE0kjA0ui/lM0Su8lRnaV2pbUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:d6:4f:67:c6:08:f6:c6:7b:a0:df:a3:8f:43:a4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
Validity
Not Before: Nov 10 19:01:36 2026 GMT
Not After : Nov 11 19:01:36 2026 GMT
Subject: CN=d9b3a53e65a022db59f13b4ba89c1113f604c35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:96:60:37:4e:8c:5c:56:7c:67:97:ba:94:5c:
e9:cb:00:07:9c:ad:60:7a:36:39:0c:64:f4:eb:16:
6d:9a:84:75:cc:d9:40:ef:b3:ad:bb:0a:2e:33:4b:
3f:63:33:be:be:45:bd:29:02:cc:3e:23:b7:34:e3:
7b:4c:f7:0a:1c:1a:7d:f7:72:67:e2:93:27:4d:88:
42:4d:dc:76:34:07:e3:1e:9c:40:92:f0:eb:5b:ff:
71:c4:50:a0:94:e5:2d:50:83:60:12:8c:fe:16:68:
cf:a5:91:86:64:08:1c:07:4e:d5:df:b1:08:68:47:
c7:db:ca:5d:b3:64:7a:56:7e:69:fc:a6:d5:13:e4:
57:f5:e0:1d:a2:73:4f:32:59:d4:11:a7:af:5a:15:
4a:6e:c0:d1:4a:31:83:cc:8b:84:d6:a5:94:ef:61:
35:6c:10:21:98:48:11:73:2c:45:d8:67:db:1e:0b:
ef:61:56:bb:41:f1:1b:da:88:ed:22:f4:90:0d:b9:
c0:36:2b:28:f4:8e:df:e4:f5:bf:30:2c:f4:7e:e0:
f9:4a:7e:b2:3b:f6:95:1f:69:fe:73:76:0c:5f:10:
0d:7e:07:bd:08:bc:0f:de:57:5b:1e:54:ec:4d:7b:
a7:43:1a:2d:af:f1:71:44:9f:b6:a7:1b:8a:e2:4b:
4d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B3:A5:3E:65:A0:22:DB:59:F1:3B:4B:A8:9C:11:13:F6:04:C3:5E
X509v3 Authority Key Identifier:
keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:b8:39:c2:03:82:99:63:ea:6d:f2:70:6a:a8:3f:6e:66:
98:92:cf:01:20:6d:18:18:25:5f:ff:41:2d:04:1e:d0:97:46:
3f:8e:5f:3e:d3:19:37:46:c7:aa:09:53:21:76:ec:59:c1:d1:
4d:ea:d9:21:46:fb:15:50:87:64:53:06:70:46:7f:9a:1f:2f:
a5:f8:64:99:44:03:33:26:2e:82:99:d0:86:eb:77:96:55:42:
cf:82:f0:a1:56:cb:2c:4d:52:26:e7:1f:7e:d5:ce:21:70:ce:
13:f3:12:91:b9:25:59:fc:f3:5d:f5:df:38:c1:f1:b9:b2:d9:
d7:c4:7d:7a:d9:94:63:75:3e:33:e2:93:b6:11:f4:5d:d3:1c:
9f:e3:1d:ab:d4:c1:17:f4:9d:bc:aa:30:a0:c1:df:f6:98:3b:
8f:7c:90:1a:58:0d:77:79:c1:59:30:47:9e:73:e4:42:12:ce:
00:ba:c5:1e:1e:cf:d3:54:c5:ad:71:ba:f4:b3:dc:b1:13:95:
84:5a:68:4c:9e:94:57:d1:29:be:4b:aa:9e:8b:47:30:c5:b7:
6f:d8:9c:cb:a7:41:50:5d:a2:a4:43:1e:a9:db:16:9e:13:e3:
cf:83:df:74:86:e1:0e:fa:23:97:0b:11:70:f8:e8:a1:f3:a7:
71:49:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 11 00:14:18 2026 by rpki-client